$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a33f6b71-e43a-33b7-9936-42af3795589a.roa File: a33f6b71-e43a-33b7-9936-42af3795589a.roa (raw, json) Hash identifier: /MhtLE5EC60lydxcpcWSaFZips6PW3anfggn12DfxOM= Subject key identifier: 95:80:5B:73:BE:5F:5B:B9:1C:39:EB:98:97:EB:F0:22:98:68:89:30 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BB1927EC28B435E176EE551D0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a33f6b71-e43a-33b7-9936-42af3795589a.roa Signing time: Thu 30 Oct 2025 13:00:38 +0000 ROA not before: Thu 30 Oct 2025 13:00:38 +0000 ROA not after: Wed 28 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 198.41.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:92:7e:c2:8b:43:5e:17:6e:e5:51:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 30 13:00:38 2025 GMT Not After : Jan 28 14:00:38 2026 GMT Subject: CN=34729392-7354-4b87-a2f9-fb95c2c46785 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:2f:77:66:61:92:e9:40:3a:70:25:4c:6c:bf: d2:c6:8c:26:82:d1:cf:3d:89:ed:8b:89:35:7a:9d: 91:4d:01:fb:2f:44:82:ab:af:a2:8d:12:a8:ed:1b: 27:25:e3:dd:6f:97:47:b8:72:bb:09:31:39:e7:1e: 7d:ac:e0:05:7b:1a:dd:bb:41:06:2c:c5:9a:c8:f9: 3d:39:a0:26:56:ed:79:f7:77:bf:6d:24:e2:61:be: 7d:71:5c:98:de:2a:7d:b1:d7:1c:62:52:91:bb:2b: 4c:46:1f:0c:88:6b:57:fc:5c:ab:9d:26:73:ae:b0: 83:d2:07:8d:d0:7b:78:2f:63:63:27:cb:06:14:46: 7a:e5:fe:26:95:7c:66:40:01:4a:9d:b9:6c:9a:f4: 50:f7:84:68:e8:f7:7b:dc:60:2c:aa:88:ea:cf:b2: 17:eb:fd:54:6b:05:ca:05:58:5b:df:53:85:8b:33: 4d:9f:7c:1c:6c:bd:a4:52:07:97:bc:b6:0a:8a:c0: 27:34:17:75:af:69:3b:f9:d5:b6:bb:29:15:50:ed: 83:c5:d1:fb:3c:61:96:c7:78:72:28:ac:49:ef:57: 02:9e:bc:b4:15:dc:66:64:3c:9c:20:26:dc:82:2b: bd:7c:9b:87:d5:01:5b:79:a9:4e:43:86:f8:03:37: a4:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:80:5B:73:BE:5F:5B:B9:1C:39:EB:98:97:EB:F0:22:98:68:89:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a33f6b71-e43a-33b7-9936-42af3795589a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 198.41.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:b5:75:14:6d:69:1c:64:fc:77:89:75:2a:99:61:db:de:9b: cd:84:1a:95:a6:f5:22:46:64:1a:f7:6b:c1:c4:73:ee:e5:36: 41:87:8c:5a:40:75:e3:39:ba:d0:41:59:e4:c5:b6:56:70:98: 2a:96:eb:cb:bf:ac:d2:ac:aa:6c:fe:8c:7a:31:76:e7:a3:2b: 53:41:5d:98:95:ad:b9:a5:49:2a:1e:5f:cd:8f:30:f4:97:8b: b2:91:db:7d:9f:7a:2b:c3:15:15:e0:9e:02:7f:bf:ac:87:c4: ce:e5:86:f3:45:5d:61:d0:14:9f:50:d8:27:8e:b9:19:9d:ec: 38:05:16:a0:b3:c7:32:b5:9b:14:0f:66:be:7b:bc:d5:ca:0d: db:1c:b4:b9:6e:83:5c:48:82:4a:9d:b4:72:00:a0:92:27:04: 9f:46:2a:b7:27:db:b2:ec:a3:f8:3b:8e:ff:97:94:b2:fd:3d: 2c:62:3a:86:51:c7:db:4a:dd:ca:c1:b0:5b:2d:6f:db:ec:35: e9:6b:bb:ec:6d:22:12:f9:6b:33:6d:c3:ae:85:2d:87:7d:27: 42:7e:87:42:74:83:e9:02:e7:71:d9:5e:d3:ff:e8:72:1a:52: cc:42:b3:e0:f6:24:82:b9:88:42:b5:cb:18:4a:0d:6f:f6:02: 89:14:cb:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxkn7Ci0NeF27lUdAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk MzQ3MjkzOTItNzM1NC00Yjg3LWEyZjktZmI5NWMyYzQ2Nzg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0C93ZmGS6UA6cCVMbL/SxowmgtHPPYnti4k1 ep2RTQH7L0SCq6+ijRKo7RsnJePdb5dHuHK7CTE55x59rOAFexrdu0EGLMWayPk9 OaAmVu1593e/bSTiYb59cVyY3ip9sdccYlKRuytMRh8MiGtX/FyrnSZzrrCD0geN 0Ht4L2NjJ8sGFEZ65f4mlXxmQAFKnblsmvRQ94Ro6Pd73GAsqojqz7IX6/1UawXK BVhb31OFizNNn3wcbL2kUgeXvLYKisAnNBd1r2k7+dW2uykVUO2DxdH7PGGWx3hy KKxJ71cCnry0FdxmZDycICbcgiu9fJuH1QFbealOQ4b4Azek5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJWAW3O+X1u5HDnrmJfr8CKYaIkwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYTMzZjZiNzEtZTQzYS0z M2I3LTk5MzYtNDJhZjM3OTU1ODlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxineMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALa1dRRtaRxk/HeJdSqZYdvem82EGpWm9SJGZBr3a8HEc+7lNkGHjFpA deM5utBBWeTFtlZwmCqW68u/rNKsqmz+jHoxduejK1NBXZiVrbmlSSoeX82PMPSX i7KR232feivDFRXgngJ/v6yHxM7lhvNFXWHQFJ9Q2CeOuRmd7DgFFqCzxzK1mxQP Zr57vNXKDdsctLlug1xIgkqdtHIAoJInBJ9GKrcn27Lso/g7jv+XlLL9PSxiOoZR x9tK3crBsFstb9vsNelru+xtIhL5azNtw66FLYd9J0J+h0J0g+kC53HZXtP/6HIa UsxCs+D2JIK5iEK1yxhKDW/2AokUy1o= -----END CERTIFICATE-----Generated at Sat Nov 1 12:32:40 2025 by rpki-client